Privacy Policy

Account information. When you sign in with Google, we receive your name, email address, and profile image. We use this to create and secure your account.

Content you create. The prompts you write, the slideshows and videos you generate, products you add, and your settings. This content is private to your account.

Connected accounts. If you choose to connect a third-party account (such as Pinterest or TikTok), we receive the access tokens that account issues so we can perform the specific actions you ask for. We describe Pinterest in detail below.

Operational data. Basic logs needed to keep the service running and secure, such as error reports and request timing. We do not use this to build advertising profiles.

We use the information above only to:

• Provide, maintain, and improve the Vyral product.
• Generate the slideshows and videos you request, including pulling in images you have chosen as backgrounds.
• Publish content to the accounts you have connected, at your direction.
• Secure your account and prevent abuse.
• Respond to support requests.

We do not sell your personal information, and we do not use the content of your connected accounts for advertising.

If you choose to connect your Pinterest account, Vyral uses Pinterest’s official OAuth flow to request read-only access to your pins and boards (the pins:read, boards:read, and user_accounts:read scopes).

We use this access for one purpose: to let you search your own saved pins and use those images as backgrounds in the slideshows you create. Vyral never posts, pins, comments, follows, or takes any write action on your behalf.

The access and refresh tokens Pinterest issues are stored encrypted at rest using AES-256-GCM, are never exposed to other users, and are never sold, rented, or shared with any third party. You can disconnect Pinterest at any time from Settings, which immediately deletes the stored tokens. Our use of Pinterest data follows the Pinterest Developer Guidelines and the Pinterest Terms of Service.

If you choose to connect your TikTok account, Vyral uses TikTok’s official Login Kit (OAuth) and requests only the permissions needed to publish on your behalf: basic profile information (your open ID, display name, and avatar, via user.info.basic) and the ability to create posts (video.publish and video.upload).

We use this access for one purpose: to publish the slideshows and videos you create to your own TikTok account, and only when you ask us to (either manually or on a schedule you set). Vyral never posts content you did not create, and never likes, follows, comments, or takes any other action on your behalf.

The access and refresh tokens TikTok issues are stored encrypted at rest using AES-256-GCM and are never exposed to other users, sold, or shared with any third party. You can disconnect TikTok at any time from Settings, which deletes the stored tokens and revokes them with TikTok. Our use of TikTok data complies with the TikTok Developer Terms of Service and Developer Guidelines, and we do not use TikTok data for any purpose other than providing the features described here.

Your data is stored in a managed Postgres database with row-level security, so each account can only read its own rows. OAuth tokens for connected accounts are encrypted before they are written to the database. Generated media is stored in access-controlled object storage. Traffic is served over HTTPS, and we apply a strict content-security policy.

We rely on a small number of vendors to run Vyral. Each receives only the data needed for its function:

• Google for sign-in.
• Pinterest and TikTok for the accounts you choose to connect.
• Vercel for hosting and media storage, and Neon for the database.

We keep your account data for as long as your account is active. You can disconnect any third-party account at any time from Settings, which deletes the related tokens right away. You can also delete content you have created. To delete your entire account and all associated data, contact us at the address below and we will process the request.

Depending on where you live, you may have the right to access, correct, export, or delete your personal data. To exercise any of these rights, contact us and we will respond within a reasonable time.

Vyral is not directed to children under 13, and we do not knowingly collect personal information from them.

We may update this policy as the product evolves. When we make material changes, we will update the effective date at the top of this page.

Questions about this policy or your data? Email us at muhammedeliwat@gmail.com.